If you click the drop down next to the red ribbon you should see a green check mark next to the certificates. Step 7: Click Install Certificates in the top left corner. Select yes if you are accessing DOD sites that use Java or if you access DOD sites with Firefox. All DoD Intermediate Certificates are available for download (one-by-one) from the DoD PKI Management website at (download the Certificate Authority Certificate, not the Certificate Revocation List, i.e. Go to the Cross-Certificate Chaining Issue page to download two zip files (i.e.Certificates_PKCS7_v4.1u4_DoD.zip and unclass-irca1_dodroot_ca2.zip, then use the File > Import Certificate option to add the certificates to the 'login' keychain. You need to download and import a few certificates into the 'login' keychain, such as DOD ROOT CA 2 (3 certificates total), DOD ROOT CA 3, and any intermediate certificates that issued the certificates on your CAC, which are greater than DOD CA-30 (such as DOD CA-31, DOD EMAIL CA-31, DOD CA-32, DOD EMAIL CA-32, DOD ID CA-33, DOD EMAIL CA-33, DOD ID CA-34, DOD EMAIL CA-34, etc.). Most of the DoD certificates are available if you add the 'SystemCACertificates' keychain using the File > Add Keychain option and navigating through the folders to Macintosh HD > System > Library > Keychains.

Smartcard Services will work for most CACs and readers, however, if you do not see your CAC keychain in the Keychain Access.app after installing the Smartcard Services package and inserting your CAC in the card reader, then I recommend using another free middleware called Centrify Express.Īside from installing middleware, you need to download and import the DoD Root and Intermediate Certificates in your Keychain Access. The instructions on IASE will direct you to Smartcard Services (middleware) downloads from Mac OS forge. You will need middleware to use your CAC on OS X. You should refer to the instructions and downloads available from the web pages under Getting Started for End Users (Mac) on DISA's Information Assurance Support Environment (IASE) website. Public Key Enable) the system all over again. Whenever you upgrade your operating system (OS), you will need to CAC-enable (i.e. Download the file here.ĭownload winscp pc. If you have CA between 27 and 32, you have to install CAs 27-32 and CA emails 27-32. On a Mac computer, DoD root certificates go up to CA 26 only. In any case, updating your DoD is called for. If your browser doesn't trust them, you may run into issues. Installing DoD Certificates Many enterprise IT systems at NPS make use of SSL certificates issued by the DoD.

Install dod certificates on mac